bn8/ldapsaisie
1
0
Fork 0
mirror of https://gitlab.easter-eggs.com/ee/ldapsaisie.git synced 2024-12-19 06:53:53 +01:00
Code Issues Projects Releases Wiki Activity

Use LSurl route to handle tmp file access

Browse source
This commit is contained in:
Benjamin Renard 2020-05-04 17:55:46 +02:00
parent add68ec132
commit 958c5b16a8
3 changed files with 37 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

3
public_html/.htaccess
View file

@ -1,5 +1,8 @@
RewriteEngine On RewriteEngine On
# Always rewrite tmp file access
RewriteRule ^(tmp/.*)$ index.php?REQUESTED_URL=$1 [L,QSA]
# If the request is not for a valid file # If the request is not for a valid file
RewriteCond %{REQUEST_FILENAME} !-f RewriteCond %{REQUEST_FILENAME} !-f
# If the request is not for a valid link # If the request is not for a valid link

18
public_html/includes/class/class.LSsession.php
View file

@ -2369,6 +2369,24 @@ class LSsession {
return False; return False;
} }
/**
* Retourne le chemin du fichier temporaire à partir du nom du fichier (s'il existe)
*
* @author Benjamin Renard <brenard@easter-eggs.com>
*
* @param[in] $hash La valeur du fichier
*
* @retval mixed
**/
public static function getTmpFileByFilename($filename) {
foreach(self :: $tmp_file as $filePath => $contentHash) {
if (basename($filePath) == $filename) {
return $filePath;
}
}
return False;
}
/** /**
* Supprime les fichiers temporaires * Supprime les fichiers temporaires
* *

16
public_html/includes/routes.php
View file

@ -249,6 +249,22 @@ function handle_image($request) {
} }
LSurl :: add_handler('#^image/(?P<image>[^/]+)$#', 'handle_image', false); LSurl :: add_handler('#^image/(?P<image>[^/]+)$#', 'handle_image', false);
/*
* Handle tmp file request
*
* @param[in] $request LSurlRequest The request
*
* @retval void
**/
function handle_tmp_file($request) {
$path = LSsession :: getTmpFileByFilename($request -> filename);
if ($path && is_file($path)) {
dumpFile($path);
}
LSurl :: error_404($request);
}
LSurl :: add_handler('#^tmp/(?P<filename>[^/]+)$#', 'handle_tmp_file');
/* /*
************************************************************ ************************************************************
* LSobject views * LSobject views